[SECURITY] [DSA 6533-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6533-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 30, 2026 https://www.debian.org/security/faq -...

OPENSUSE-SU-2026:21982-1 Security update for sccache

This update for sccache fixes the following issues: - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243868. - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274146. -...

OPENSUSE-SU-2026:21983-1 Security update for helm

This update for helm fixes the following issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265758. - CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted plugin bsc1261939....

CVE-2026-47598

A flaw was found in the NVIDIA GPU Display Driver for Linux. A race condition between asynchronous event delivery and file close operations in the open-source kernel module can lead to a use-after-free condition, where memory is accessed after it has already been released. A local unprivileged...

CVE-2026-47586

A flaw was found in nvidia-driver. A vulnerability in the kernel module allows an attacker with physical access to trigger a use-after-free condition, which occurs when the driver accesses memory that has already been released. Successful exploitation could allow the attacker to achieve arbitrary...

CVE-2026-47565

A flaw was found in the NVIDIA GPU display driver. A privileged local user could trigger a race condition in the kernel mode layer, resulting in an out-of-bounds memory write. A successful exploit may allow the attacker to execute arbitrary code, escalate privileges, cause a denial of service DoS...

CVE-2026-47533

A flaw was found in nvidia-driver. A local attacker with administrative privileges can trigger an array indexing error within the kernel-mode driver layer. Successful exploitation could allow the attacker to execute arbitrary code, escalate system privileges, access sensitive data, or cause a...

CVE-2026-47525

A flaw was found in nvidia-driver. The kernel mode layer improperly validates array indices during driver operations. A local attacker can exploit this vulnerability to achieve arbitrary code execution, escalate privileges, cause a Denial of Service DoS, or tamper with system data...

CVE-2026-47518

A flaw was found in the NVIDIA GPU Display Driver. An incorrect permission assignment for a critical resource in a secure microcontroller component allows an attacker with privileged local access to modify restricted protected memory. This vulnerability may allow an attacker to achieve arbitrary...

CVE-2026-47509

A flaw was found in the NVIDIA GPU display driver. A local user with elevated privileges can trigger an out-of-bounds write writing data past intended memory buffer limits within the kernel mode layer. A successful exploit could allow the attacker to achieve arbitrary code execution, escalate...

CVE-2026-102677

A flaw was found in Electron. The cache mechanism for sandboxed preload scripts fails to verify that cached entries match the requested script. In applications that load untrusted web content, an attacker with a compromised renderer process can write malicious data into the cache to be reused on...

CVE-2026-47601

A flaw was found in the NVIDIA GPU display driver open-source kernel module. An unprivileged local user can trigger this vulnerability when importing a read-only buffer from another device via the Direct Memory Access Buffer DMA-BUF sharing framework, leading to improper preservation of memory...

CVE-2026-47595

A flaw was found in the NVIDIA GPU Display Driver. The driver's kernel mode layer fails to properly preserve memory permissions, allowing an unprivileged local user to write data to read-only memory. A local attacker could exploit this vulnerability to execute arbitrary code, escalate privileges,...

CVE-2026-47600

A flaw was found in the NVIDIA GPU Display Driver. The driver's kernel mode layer improperly handles resources during error processing by operating on uninitialized data. A local user with low privileges could exploit this flaw to achieve arbitrary code execution, escalate privileges, access...

CVE-2026-47596

A flaw was found in the NVIDIA GPU Display Driver for Linux. In the kernel mode layer, memory permissions are not properly preserved, allowing an unprivileged local user to write to read-only memory. This issue can lead to arbitrary code execution and privilege escalation on the affected system...

CVE-2026-47591

A flaw was found in the NVIDIA GPU display driver. An incorrect authorization issue in the kernel mode layer allows a local unprivileged user to bypass read-only memory protections and obtain write access to restricted memory. A local attacker could exploit this flaw to escalate privileges, execu...

CVE-2026-47558

A flaw was found in the NVIDIA GPU display driver. An unprivileged local user can exploit this vulnerability by triggering a double-free memory management error—releasing the same memory block twice—within the kernel-mode layer while handling imported memory states. A successful exploit could all...

CVE-2026-47550

A flaw was found in the NVIDIA GPU display driver. The kernel mode layer fails to properly validate user-supplied memory pointers before dereferencing them. A local attacker with low privileges can exploit this issue by submitting a crafted pointer, potentially leading to arbitrary code execution...

CVE-2026-47548

A flaw was found in the NVIDIA GPU display driver. A local user can exploit an out-of-bounds write vulnerability within the kernel mode layer to corrupt system memory. Successful exploitation could allow an attacker to achieve arbitrary code execution with elevated kernel privileges, trigger a...

CVE-2026-47545

A flaw was found in the NVIDIA GPU Display Driver. A local user with basic privileges can exploit an out-of-bounds read vulnerability in the driver's kernel-mode layer. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges, access or tamper with sensitiv...